Errata 5127: https://www.rfc-editor.org/errata/eid5127
Proposed State: Verified
Revision:
Section 5.2.
OLD
IMSK = First 32 octets of TLS-PRF(EMSK, "teapbind...@ietf.org" |
"\0" | 64)
NEW
IMSK = First 32 octets of TLS-PRF(EMSK, "teapbind...@ietf.org" |
'/0', 64)
Notes:
According to
RFC5246 The Transport Layer Security (TLS) Protocol Version 1.2
5. HMAC and the Pseudorandom Function
"TLS's PRF is created by applying P_hash to the secret as:
PRF(secret, label, seed) = P_<hash>(secret, label + seed)"
In this case the seed is the 2-byte length of the output as defined by RFC
5295. In terms of P_<Hash> the derivation would look like:
IMSK = P_<Hash>(EMSK, "teapbind...@ietf.org" | 0x00 | 0x00 | 0x40)
_______________________________________________
Emu mailing list
Emu@ietf.org
https://www.ietf.org/mailman/listinfo/emu
